I'm having difficulty figuring out something that I think should be simple so
I was hoping some of the talented folk here could help me out:
Say I've been given the following public, routeable IPs to use:
123.123.123.10
123.123.123.11
123.123.123.12
123.123.123.13
And I want to put them all behind the same firewall while assigning the
public IPs to the protected machines:
+- 123.123.123.11
|
123.123.123.10 --+- 123.123.123.12
|
+- 123.123.123.13
Ideally, I'd like to have a number of non-routeable IPs available by way of
one of these two options:
+- 123.123.123.11
|
123.123.123.10 --+- 123.123.123.12
|
+- 123.123.123.13
|
+- 192.168.1.1
|
+- 192.168.1.2
OR
+- 123.123.123.11
|
123.123.123.10 --+- 123.123.123.12
|
+- 123.123.123.13 --+- 192.168.1.1
|
+- 192.168.1.2
How do you do this? Up until recently, I've just assigned all of the
routeable IPs to the firewall and forwarded the appropriate ports to the
servers behind -- but ALL the servers behind the firewall are using
192.168.0.0/16 ips at that stage.
I thought I could just allow Linux to forward the packets, but I couldn't
figure out the routing since I'm not dealing with a whole subnet, only a few
allocated IPs.
Someone care to shed some light here?
--
the more law and order are made prominent,
the more thieves and robbers there will be.
- lao-tsu
--
[email protected] mailing list